Google’s Project Zero exists to hunt down zero-day vulnerabilities such as the yet to be fixed Windows 10 security bomb I wrote about recently. But it’s not just Microsoft that comes under scrutiny from the Google security researchers: a vulnerability in Apple’s iMessage has been found that “bricks” an iPhone and survives hard resets, leaving users having to wipe the device and start factory fresh again. Read full story here: Google Confirms Apple iPhone Bricking iMessage Bomb | Forbes
Read MoreTag: Security
More Than 1,000 Android Apps Harvest Data Even After You Deny Permissions | CNET
Permissions on Android apps are intended to be gatekeepers for how much data your device gives up. If you don’t want a flashlight app to be able to read through your call logs, you should be able to deny that access. But even when you say no, many apps find a way around: Researchers discovered more than 1,000 apps that skirted restrictions, allowing them to gather precise geolocation data and phone identifiers behind your back. Read full story here: More Than 1,000 Android Apps Harvest Data Even After You Deny…
Read MoreUnless You Want Your Payment Card Data Skimmed, Avoid These Commerce Sites | Ars Technica
More than 100 e-commerce sites around the world are infected with malicious code designed to surreptitiously skim payment card data from visitors after they make purchases, researchers reported on Wednesday. Among those infected are US-based websites that sell dental equipment, baby merchandise, and mountain bikes. Read full story here: Unless You Want Your Payment Card Data Skimmed, Avoid These Commerce Sites | Ars Technica
Read MoreCanada Pushes Back As U.S. Congressman Flags Threats Along ‘Totally Wide Open’ Northern Border | CTV News
Canada is defending accusations from a U.S. Congressman that the United States is ignoring security issues along the Canada-U.S. border. “It is the longest, most successful international boundary — un-militarized international boundary — in the history of the world, and we’re determined to keep it that way,” Public Safety Minister Ralph Goodale said in an interview with CTV Power Play Host Don Martin on Wednesday. Read full story here: Canada Pushes Back As U.S. Congressman Flags Threats Along ‘Totally Wide Open’ Northern Border | CTV News
Read MoreUS Judge Rules That Feds Can’t Force Fingerprint Or Face Phone Unlocks | Engadget
Authorities can’t force people to unlock devices with their faces, fingers or irises, a magistrate judge from California has ruled. Forbes has uncovered a nine-page order denying the search warrant for an investigation looking into a Facebook extortion crime. While the judge admits that investigators were able to establish probable cause for the warrant, she called their request to unlock any phone on the premises with biometrics “overbroad.” The request wasn’t limited to a particular person or device, and authorities would’ve been able to get everyone in the house to…
Read MoreMicrosoft Will Stop Supporting Windows 7 One Year From Today | CNET
Starting Jan. 14, 2020, exactly one year from Monday, Microsoft will no longer support Windows 7. That means no more updates or security fixes for the operating system. Microsoft will continue to provide security updates for Windows 7 to business customers that pay for support, according to ZDNet, but not individual users. Read full story here: Microsoft Will Stop Supporting Windows 7 One Year From Today | CNET
Read MoreFacebook Bug Exposed Up To 6.8M Users’ Unposted Photos To Apps | TechCrunch
Reset the “days since the last Facebook privacy scandal” counter, as Facebook has just revealed a Photo API bug gave app developers too much access to the photos of up to 5.6 million users. The bug allowed apps users had approved to pull their timeline photos to also receive their Facebook Stories, Marketplace photos, and most worryingly, photos they’d uploaded to Facebook but never shared. Facebook says the bug ran for 12 days from September 13th to September 25th. Facebook tells TechCrunch it discovered the breach on September 25th, and…
Read MoreUS Border Officers Don’t Always Delete Collected Traveler Data | Engadget
Privacy advocates aren’t just concerned about warrantless device searches at the border because of the potential for deliberate abuse — it’s that the officials might be reckless. And unfortunately, there’s evidence this is the case in the US. Homeland Security’s Office of the Inspector General has released audit findings showing that Customs and Border Protection officers didn’t properly follow data handling procedures in numerous instances, increasing the chances for data leaks and hurting accountability. Read full story here: US Border Officers Don’t Always Delete Collected Traveler Data | Engadget
Read MoreMore Companies Are Chipping Their Workers Like Pets | Engadget
The trend of blundering into the void of adopting new tech, damn the consequences, full speed ahead, continues this week. The Telegraph tells us about “a number of UK legal and financial firms” are in talks with a chip company to implant their employees with RFID microchips for security purposes. “One prospective client,” The Telegraph wrote, “which cannot be named, is a major financial services firm with “hundreds of thousands of employees.” Read full story here: More Companies Are Chipping Their Workers Like Pets | Engadget
Read More